Skip to content

Conversation

@TimWolla
Copy link
Member

@TimWolla TimWolla commented Oct 19, 2025

This macro is unsafe when the given buffer is too small, since snprintf() returns the required length of the string if it would fit. Thus unconditionally writing a NUL there might result in a out-of-bounds write.

This macro is unsafe when the given buffer is too small, since `snprintf()`
returns the *required* length of the string if it would fit. Thus
unconditionally writing a NUL there might result in a out-of-bounds read.
Copy link
Member

@nielsdos nielsdos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assuming green CI: LGTM

@TimWolla TimWolla merged commit 1ef7abf into php:master Oct 20, 2025
10 checks passed
@TimWolla TimWolla deleted the remove-zend-ltoa branch October 20, 2025 06:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants